this makes sense to me. I think of spaces as being created for visibility and to make clickapps available. The optimum solution would be to make the permission attributes available in projects available at the space level.